CVE-2024-22862
9.8CRITICALInteger overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
Veröffentlicht: 1/27/2024Aktualisiert: 8/11/2025
Beschreibung
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
KI-AnalyseKI-gestützt
Betroffene Produkte
ffmpegffmpeg
6.1
Referenzen
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113Mailing List
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7Patch